Product:
MSCOMCTL.OCX
Summary
The ListView, ListView2, TreeView, and TreeView2 ActiveX controls in MSCOMCTL.OCX allow remote attackers to execute arbitrary code via a crafted web site, Office document, or .rtf file that triggers system state corruption. This vulnerability was exploited in the wild in April 2012, known as the MSCOMCTL.OCX RCE Vulnerability.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.8 | CVE-2012-0158 |
Exploitation
To exploit this vulnerability, an attacker can create a malicious web page or document that, when opened by a user, triggers the corruption of the system state. This can lead to arbitrary code execution on the victim’s machine, allowing the attacker to gain control over the system without requiring any authentication.
Affected Products
- Microsoft Office 2003 SP3
- Microsoft Office 2007 SP2 and SP3
- Microsoft Office 2010 Gold and SP1
- Office 2003 Web Components SP3
- SQL Server 2000 SP4
- SQL Server 2005 SP4
- SQL Server 2008 SP2, SP3, and R2
- BizTalk Server 2002 SP1
- Commerce Server 2002 SP4, 2007 SP2, and 2009 Gold and R2
- Visual FoxPro 8.0 SP1 and 9.0 SP2
- Visual Basic 6.0 Runtime
Mitigation
To mitigate this vulnerability, users should apply the updates provided by Microsoft as per their instructions. Keeping software up to date is crucial in protecting against known vulnerabilities.
References
- Comment on the curious case of a CVE-2012-0158 exploit
- SecurityFocus BID 52911
- SecurityTracker ID 1026899
- SecurityTracker ID 1026900
- SecurityTracker ID 1026902
- SecurityTracker ID 1026903
- SecurityTracker ID 1026904
- SecurityTracker ID 1026905
- US-CERT TA12-101A
- Microsoft Security Bulletin MS12-027
- IBM X-Force Vulnerability 74372
- CISecurity OVAL Definition
- CISA Known Exploited Vulnerabilities Catalog